Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-2251

Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 36.0.0
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • wildfly

    fixed in 36.0.0

  • wildfly-ejb3

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-apache-cxf

    Version range not reported

  • eap7-artemis-native

    Version range not reported

  • eap7-elytron-web

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-hal-console

    Version range not reported

  • eap7-hibernate-validator

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-jbossws-cxf

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-wildfly-elytron

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-apache-cxf

    Version range not reported

  • eap7-artemis-native

    Version range not reported

  • eap7-elytron-web

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-hal-console

    Version range not reported

  • eap7-hibernate-validator

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-jbossws-cxf

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-wildfly-elytron

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-apache-cxf

    Version range not reported

  • eap7-artemis-native

    Version range not reported

  • eap7-elytron-web

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-hal-console

    Version range not reported

  • eap7-hibernate-validator

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-jbossws-cxf

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-wildfly-elytron

    Version range not reported

  • wildfly-ejb3

    Version range not reported

  • eap8-activemq-artemis

    Version range not reported

  • eap8-apache-commons-beanutils

    Version range not reported

  • eap8-apache-cxf

    Version range not reported

  • eap8-apache-mime4j

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-elytron-web

    Version range not reported

  • eap8-fastinfoset

    Version range not reported

  • eap8-hal-console

    Version range not reported

  • eap8-hibernate

    Version range not reported

  • eap8-httpcomponents-asyncclient

    Version range not reported

  • eap8-jboss-remoting

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-narayana

    Version range not reported

  • eap8-neethi

    Version range not reported

  • eap8-reactivex-rxjava2

    Version range not reported

  • eap8-slf4j

    Version range not reported

  • eap8-velocity

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-elytron

    Version range not reported

  • eap8-activemq-artemis

    Version range not reported

  • eap8-apache-commons-beanutils

    Version range not reported

  • eap8-apache-cxf

    Version range not reported

  • eap8-apache-mime4j

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-elytron-web

    Version range not reported

  • eap8-fastinfoset

    Version range not reported

  • eap8-hal-console

    Version range not reported

  • eap8-hibernate

    Version range not reported

  • eap8-httpcomponents-asyncclient

    Version range not reported

  • eap8-jboss-remoting

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-narayana

    Version range not reported

  • eap8-neethi

    Version range not reported

  • eap8-reactivex-rxjava2

    Version range not reported

  • eap8-slf4j

    Version range not reported

  • eap8-velocity

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-elytron

    Version range not reported

  • wildfly-ejb3

    Version range not reported

References 12

access.redhat.com

bugzilla.redhat.com

GitHub · wildfly/wildfly

issues.redhat.com